Legal

Privacy Policy

The short version: your photos never leave your own devices, and we hold only what's needed to run your account and subscription.

Effective date: July 15, 2026 · Last updated: July 15, 2026

Plain-language summary. CachePix is local-first. The desktop app reads photos from your own drives and never uploads them. It syncs a catalog (previews, thumbnails, and metadata) to your phone over your own wifi — none of that passes through our servers. The only information we hold is your account email and your subscription status. We don't sell your data, we don't run ads, and payments are handled by Apple and Google.

1. Who we are

CachePix is developed and operated by SmartLink Basics, LLC ("CachePix," "we," "us"). CachePix consists of a desktop application for macOS and Windows, mobile applications for iOS and Android, and a small account service that stores your login and subscription status. This policy explains what we collect, what we don't, and how the pieces fit together. Questions? Contact us or email support@cachepix.com.

2. The data we hold — and the data we don't

What we hold. To run your account we store a small amount of data on our account service:

  • Your email address — used to sign you in (via a one-time code) and to associate your subscription with your account.
  • Subscription status — whether you have an active trial, subscription, or lifetime purchase, the plan type, and its expiration or renewal date. This is written by Apple's and Google's purchase systems so we can unlock the apps you paid for.
  • Support messages — if you contact us, we keep your message and email so we can reply.

What we do not hold. We never receive or store your photos, your previews or thumbnails, your catalog, your folder structure, your keywords, the names attached to your photos, or any facial or biometric data. None of that is uploaded to us or passed through our servers at any point.

3. Your photos and catalog stay on your devices

Desktop (macOS & Windows). The CachePix desktop app reads the photos on your own drives to build a catalog. Your original files are never uploaded, copied to a cloud, or transmitted to us or any third party. CachePix never moves, renames, edits, or deletes your originals — it only reads them. If you remove a folder or "forget" a drive, the catalog entries and cached previews are removed and your files stay exactly where they are.

Phone (iOS & Android). The phone app syncs your catalog directly from your computer over your own local wifi network. The data that travels — reduced-size preview images, thumbnails, and metadata such as filenames, capture dates, folder structure, keywords, and any people names already present in your files — goes from your computer to your phone and nowhere else. It does not pass through, and is not stored on, any server we operate. Stored on your phone is a local catalog database, cached thumbnails and previews, and a pairing token kept in the device keychain that authenticates your phone to your own computer. Deleting the app deletes everything it stored, and you can unpair and remove the synced data from inside the app at any time.

4. Payments

Subscriptions and the lifetime purchase are sold through Apple's App Store (iOS) and Google Play (Android) using their in-app purchase systems. Apple and Google process your payment and handle your payment details directly — we never see or store your card number. Apple and Google send us only the information needed to confirm your purchase and its status (associated with the account identifier you choose at purchase). Their handling of your data is governed by Apple's and Google's own privacy policies.

5. Service providers we use

We keep our stack deliberately small. The limited data described in Section 2 is processed by:

  • Supabase — hosts our account database and authentication (your email and subscription status).
  • Apple & Google — process in-app purchases and, on iOS/Android, deliver any push notifications you enable.
  • Resend — sends transactional email, such as your one-time sign-in code and replies to support requests.

These providers act solely as our service providers and do not use your data for their own purposes. We do not use advertising networks, and we do not share your data with advertisers.

6. Facial recognition and biometric data

Any recognition or matching CachePix performs happens entirely on your own device. If a version of CachePix generates facial data (for example, a mathematical "embedding" used to match faces within your own library), that data is created and used only on your device and is never transmitted to us, stored on our servers, or shared with any third party. The people names shown in your catalog may originate from metadata already written into your files or from matching you perform locally. Because this processing occurs on equipment you own and control, you are responsible for obtaining any consent required by the biometric and privacy laws that apply to the individuals in your photos — including the Illinois Biometric Information Privacy Act (BIPA) and similar laws in Texas, Washington, and elsewhere. See our Biometric Data Policy for detail.

7. Permissions the apps request

  • Local network (phone). Used solely so the app can reach your computer over your wifi to sync the catalog.
  • Camera (phone). Used solely to scan the pairing QR code shown by the desktop app. No image is captured or stored during scanning.
  • No background collection. The apps do not collect location, access your contacts, or track you across other apps. They talk to your computer only while you are actively using them, plus any push notifications you enable.

8. Security

We use industry-standard measures for the limited data we hold: all traffic to our account service is encrypted over HTTPS/TLS; account access uses short-lived tokens; and database row-level security restricts each record to its owner. The catalog sync between your computer and phone occurs on your own local network and is gated by a pairing token. No system is perfectly secure, and we cannot guarantee absolute security.

9. Retention and deletion

We retain your account email and subscription status for as long as your account exists. You can request deletion of your account and associated data at any time by emailing support@cachepix.com. When you delete your account, your email and entitlement records are removed; billing records held by Apple or Google are governed by their policies, and we may retain limited records where required by law. Your photos, catalog, and previews live only on your own devices — delete the apps or your local files to remove them.

10. Your rights

You can access, correct, or delete the limited account data we hold by contacting us. If you are in the EEA, UK, or another jurisdiction with data-protection laws, you may have additional rights (access, rectification, erasure, portability, objection, and restriction); contact us to exercise them and we will respond within 30 days. We do not sell personal data.

11. International users

CachePix is operated from the United States. If you use it from elsewhere, the limited account data we hold is processed in the United States. By using CachePix from outside the U.S., you consent to that transfer.

12. Children

CachePix is not directed to children under 13 (or the minimum age of digital consent in your region) and we do not knowingly collect personal information from them. Photos in your own library remain under your control; you are responsible for their appropriate use.

13. Cookies (website)

This website uses only what's necessary to function. We do not use advertising cookies or third-party marketing trackers. If we add privacy-respecting analytics in the future, we will update this policy.

14. Changes to this policy

We may update this policy from time to time. Material changes will be reflected in the "Last updated" date above and, where appropriate, announced in the app or by email.

15. Contact

SmartLink Basics, LLC · support@cachepix.com · Contact form

Note. This policy is provided for transparency and is not legal advice. SmartLink Basics, LLC should have counsel review it before launch to confirm it fits the shipped feature set and your obligations.